Package com.pulumi.gcp.accesscontextmanager.outputs

Class ServicePerimeterSpec

  • public final class ServicePerimeterSpec
extends java.lang.Object

    • Method Detail

      • accessLevels

        public java.util.List<java.lang.String> accessLevels()
        Returns:
        A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

      • egressPolicies

        public java.util.List<ServicePerimeterSpecEgressPolicy> egressPolicies()
        Returns:
        List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

      • ingressPolicies

        public java.util.List<ServicePerimeterSpecIngressPolicy> ingressPolicies()
        Returns:
        List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

      • resources

        public java.util.List<java.lang.String> resources()
        Returns:
        A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

      • restrictedServices

        public java.util.List<java.lang.String> restrictedServices()
        Returns:
        GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

      • vpcAccessibleServices

        public java.util.Optional<ServicePerimeterSpecVpcAccessibleServices> vpcAccessibleServices()
        Returns:
        Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.